Hello, Further to my previous note, looked at SharedOFBiz, but that too does not seem like providing Party level security. Taking the travel company example here is what I am looking to do.
Parent Company has a set of agents who are authorized to sell as 'Sales Representative' and take orders. Parent Company should be able to see all of these orders while each of the 'Sales Representative' should be able to create, view and edit only their orders and not others. With the default data set up (I created some Parties with Sales Representative roles) all orders seem to be visible to everyone. Is there a way to restrict it? If this is not supported OOTB, then I would very much appreciate some design guidelines to implement this so that it can be patched back to OFBiz if useful. I am very new to OFBiz and still not quite familiar with all the moving pieces and therefore would really appreciate some advice here Thanks in advance Sandeep On 5/25/07, Sandeep Ray <[EMAIL PROTECTED]> wrote:
Hi, I am very new to OFbiz (discovered it very recently). It is a treasure trove. :-) Have been dabbling with it for a brief while now and looking to learn more about security and access control. I am trying to work out a multi-organization hosted model scenario and as such would like to limit all users to their party related data only. For example an order Entry for a user 'User A' for Company 'A' should not be visible to 'userB' for 'CompanyB'. Exceptions could be if 'CompanyB' is the customer for the order, in which case 'userB' should be able to see the same. I played around with some examples but couldn't get this kind of control.. All orders created seem to be visible to ALL. Going through some of the documentation I found some reference to control based on Party. http://ofbizwiki.go-integral.com/Wiki.jsp?page=SecurityAdministration The above link seems to suggest Category #2 (Party-driven) as a feature, but can't figure out how it works.. Would really appreciate if anyone has any inputs. Thanks Sandeep PS: Just started looking at SharedOFBiz to see if that throws up something.
